Apustheme Drone vulnerabilities

• apustheme drone WordPress Drone theme <= 1.40 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-49249 7.1 HighJanuary 22, 2026